Static task
static1
Behavioral task
behavioral1
Sample
0da1f8217f0f656d691baa42905600e7_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0da1f8217f0f656d691baa42905600e7_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
0da1f8217f0f656d691baa42905600e7_JaffaCakes118
-
Size
30KB
-
MD5
0da1f8217f0f656d691baa42905600e7
-
SHA1
6d888d96a10df5c38af2da3b779d5aa5ada2a1aa
-
SHA256
34b8a745e6b0ad443679db5b8b02075f4422e2f74ae17da3e38d6450e5a3c1e1
-
SHA512
9611743aa77fd7cc967aecf989e5722db3197932922183420623e10a325613bc856846c8fb5f04a2e220880b0b0e2dc7f0bff3c51de94cc454d853ef4ff3e483
-
SSDEEP
384:WnmvMYB3FDajM12xyuoVqJhzVMSPy2IiKfCakzZ7tsyy3RxampBVuam73m0ODFbS:WmvTBUjM1ka2VPKjfyNgVxK73mBB6tZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0da1f8217f0f656d691baa42905600e7_JaffaCakes118
Files
-
0da1f8217f0f656d691baa42905600e7_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gw9ppc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE